$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa File: 21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa (raw, json) Hash identifier: 1fnE4WvMI2YP6mqRR3oDuOFoflLEe0PWZBRPaDw7p9k= Subject key identifier: 92:EC:FD:C4:5B:49:AA:1A:8C:D2:C3:30:1A:E3:E1:C5:76:BF:DB:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848A830B84024338D6F2D140580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 20940 IP address blocks: 23.200.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b8:40:24:33:8d:6f:2d:14:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=e4053e99-025f-41ae-8a8a-c4a8f1527776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:70:cf:9d:ad:64:89:dc:18:13:bf:2a:95: 26:c3:79:c6:f3:0a:a1:cb:ea:03:04:a4:25:1a:5c: 70:2d:90:f6:82:58:82:07:79:d2:43:8e:a1:32:12: 78:1b:55:5a:8e:18:c9:3c:e4:4a:55:76:94:f8:f1: 2d:b4:00:f3:94:f7:36:b4:55:fe:6d:c4:28:be:b1: 2c:f5:49:4c:c6:1f:e6:74:1a:0c:db:c1:93:29:f0: f8:3b:69:34:4a:b8:47:41:cf:bd:c0:1c:f6:be:11: b8:71:fc:a3:6b:de:34:a1:df:aa:c5:7b:bb:db:2c: a3:ff:99:cf:8c:d3:3a:3f:fd:3f:8b:c9:4e:e0:01: 76:2e:d2:4f:58:26:c7:49:58:88:65:a1:d2:5b:b3: 0d:dc:a1:d0:ad:c8:25:3c:f4:74:25:8c:50:07:c6: 23:96:92:a4:db:4f:8a:2f:aa:50:da:4b:f0:34:11: ba:f9:14:c8:e3:43:8b:31:d6:c5:76:d7:35:6b:06: 32:d8:e4:1f:d3:5b:c6:3c:49:b3:c7:09:f7:f6:61: 8b:78:d1:ef:81:11:be:7e:60:0e:33:05:39:4e:a0: b9:81:a4:c6:9b:c8:20:fa:b1:e7:c4:99:5f:37:61: 18:31:d8:e2:e3:17:3f:bb:c3:1c:d8:45:19:f7:74: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EC:FD:C4:5B:49:AA:1A:8C:D2:C3:30:1A:E3:E1:C5:76:BF:DB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a3daee-c9ff-37a8-8c49-19504c82dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3a:39:8f:ae:01:eb:05:0d:43:17:9c:08:a1:66:29:ef:68: a1:f7:77:a0:35:b8:b8:ef:0f:a8:bf:96:61:53:e8:7d:ae:a2: ed:e8:a1:27:33:f6:f8:4b:54:2c:c9:99:97:cf:8e:e7:a8:40: c1:99:64:9d:6b:3e:6e:b3:1f:0b:b6:19:9c:c2:1a:d6:ae:14: 09:53:bc:f3:02:7c:a7:9a:6a:1d:43:d7:e5:99:f8:13:1a:73: bc:b4:28:d9:2a:c8:b8:a5:15:a4:d2:9a:a2:63:31:fe:2a:cd: ef:78:58:7c:e5:30:be:e8:ef:06:cc:bb:fb:6c:71:9e:a8:5d: 19:0f:f2:55:2c:73:72:b3:cd:0f:f2:ad:22:37:18:ff:a2:80: e0:9e:fe:8a:34:8f:52:0a:69:05:c8:fc:40:6b:00:d9:91:d0: d0:6c:9f:91:3e:08:cd:7d:ae:3f:43:b0:99:02:a6:79:0d:f2: c9:38:09:45:63:7d:4c:e6:47:c4:4e:0d:bf:e9:ee:8b:ea:0a: 26:23:52:a3:4d:7f:b6:72:2e:ca:ef:2a:57:c3:22:46:54:08: f5:ec:4d:59:03:8c:9f:e6:8a:17:26:9e:21:3d:c4:f6:cc:67: a5:75:0e:43:d3:9d:49:d5:0e:23:27:53:2f:f6:68:3a:be:73: 6f:97:d1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLhAJDONby0UBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTQwNTNlOTktMDI1Zi00MWFlLThhOGEtYzRhOGYxNTI3Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje1wz52tZIncGBO/KpUmw3nG8wqhy+oDBKQl GlxwLZD2gliCB3nSQ46hMhJ4G1VajhjJPORKVXaU+PEttADzlPc2tFX+bcQovrEs 9UlMxh/mdBoM28GTKfD4O2k0SrhHQc+9wBz2vhG4cfyja940od+qxXu72yyj/5nP jNM6P/0/i8lO4AF2LtJPWCbHSViIZaHSW7MN3KHQrcglPPR0JYxQB8YjlpKk20+K L6pQ2kvwNBG6+RTI40OLMdbFdtc1awYy2OQf01vGPEmzxwn39mGLeNHvgRG+fmAO MwU5TqC5gaTGm8gg+rHnxJlfN2EYMdji4xc/u8Mc2EUZ93SBQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLs/cRbSaoajNLDMBrj4cV2v9tNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFhM2RhZWUtYzlmZi0z N2E4LThjNDktMTk1MDRjODJkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk6OY+uAesFDUMXnAihZinvaKH3d6A1uLjvD6i/lmFT6H2uou3ooScz 9vhLVCzJmZfPjueoQMGZZJ1rPm6zHwu2GZzCGtauFAlTvPMCfKeaah1D1+WZ+BMa c7y0KNkqyLilFaTSmqJjMf4qze94WHzlML7o7wbMu/tscZ6oXRkP8lUsc3KzzQ/y rSI3GP+igOCe/oo0j1IKaQXI/EBrANmR0NBsn5E+CM19rj9DsJkCpnkN8sk4CUVj fUzmR8RODb/p7ovqCiYjUqNNf7ZyLsrvKlfDIkZUCPXsTVkDjJ/mihcmniE9xPbM Z6V1DkPTnUnVDiMnUy/2aDq+c2+X0Vw= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:19 2025 by rpki-client